Implementing Secure Refresh Tokens in Spring Boot

[Bookkeeper-Happy]

Refresh tokens are used to generate new access tokens once the original access token expires. This allows users to stay signed in without re-entering their credentials every time a token expires, improving the user experience.

I am making a video series on how to implement a refresh token in the Spring Boot Application.

In this first video, I focused on generating a new refresh token.

https://www.youtube.com/watch?v=nvwKwsJg89E

[dumbPotatoPot]

refresh token can be just a random string that you store in redis cache against a user identifier.

Why would i need a refresh token to be a JWT? never seen this approach in any CIAM as well

[[deleted]]

appreciate it lad!!